QNAP Video Station
Moderate fix1 remedy
cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 5.8.2
QNAP Video Station SQL Injection Vulnerability Allowing Code Execution
Vulnerability
Patched
A SQL injection vulnerability has been identified in QNAP Video Station versions prior to 5.8.2. This vulnerability allows an attacker with local network access and an administrator account to execute unauthorized code or commands.
Impact
Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.
Remediation
Users can upgrade to QNAP Video Station version 5.8.2 or later to address this vulnerability.
Added: Mar 11, 2026, 8:27 AM
Updated: Mar 11, 2026, 8:27 AM
Vulnerability Rating
Custom Algorithm
spread
6.8impact
7.5exploitability
3.0remediation
7.7relevance
3.8threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.